Using The Action Manager To Forward Logs By Domain; Configuring Action Parameters - Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual

Using the Action Manager to Forward Logs by Domain

Copyright © 2010, Juniper Networks, Inc.
Click the Actions tab and check SMTP Enable.
7.
Configure the target e-mail addresses for this rule, if they differ from the defaults you
8.
configured in the previous steps.
Use the Action Manager node to configure the management system to perform actions
(such as syslog, export, or alarm) on log data based on the criteria you specify. These
actions occur for all the managed devices in a specific domain or subdomain.
To enable the management system to export logs, you must configure the following:
Action Parameters—These settings define the default log export settings for the
management system, and determine how the system handles qualified log entries
(log entries that match specified log criteria).
Device Log Action Criteria—The criteria specifies the category and severity of the log
entries you want to export. When a log entry meets the specified criteria, it is considered
qualified, and NSM performs the specified actions defined in the criteria.

Configuring Action Parameters

From the Action Manager, select Action Parameters to define the default log export
settings for the management system. To enable the management system to export
qualified logs to the system log, SNMP, CSV, XML or e-mail, configure the export settings
for each format as detailed in the following sections. For every log action criteria, you can
specify and edit multiple system log and SNMP servers with their respective system log
server facilities and SNMP communities.
Exporting to the System Log
For exporting to the system log, configure the IP address and the server facility for all of
mulitple syslog servers to which you want to send qualified logs. NSM uses the specified
server when exporting qualified log entries to the system log.
To actually export logs to a system log server, you must select "Syslog Enable" using the
Actions tab in the Device Log Action Criteria node.
Exporting to SNMP
For exporting to SNMP, configure the following SNMP settings:
SNMP Manager—Specify the IP addresses of the SNMP servers to which the GUI Server
sends SNMP traps.
SNMP Community—Specify SNMP community names that provide the desired
combination of both read and write access from the SNMP server.
NSM uses this information when exporting qualified log entries to SNMP. This setting
defines the SNMP settings for the management system. To actually export logs to the
specified SNMP servers and community, you must select "SNMP Enable" using the Actions
tab in the Device Log Action Criteria node.
Chapter 19: Logging
797